BlackchatSetup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
BlackchatSetup.exe
Size 45.2MB
Sample260730-ty4ctacb68
SHA256 6a82e83a536d060a92e0381b25cfe8d6b57ab14e923284890e5d813b83c74c86
MD5 eeb56dd54a427ed2472c6e1983f00da4
SHA1 08f968c9e40f7fcdcf508e9249c87788b400433d
SHA512 3406b114685d741dfa4c68ef43b5a886977c549f2e9f2106acbb10ef1f4a994af73e6ac6c0d79101586744876b9514054bd2411bfb9b0a77df6ef43ea9b87c72
SSDEEP 786432:YIlXNDaTXdjo0fhGdWZP1cxtGzYtksufP8zWsPH49FYXPAjEhy4HPrJd45hL:jN8X9o0fhUxqUkrkPPH8FY/QJgVa5N
TLSH
T1BFA73384EBC345F2ED86053C41B6F33BAA3A75204731DCD7C7905A25ECE12E2693A799
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BlackchatSetup.exe

File Explorer

BlackchatSetup.exe

.exe 45.2MB

BlackchatSetup.exe

IMPHASH 958105ae0ee99c1453d86f39d3c60656
SHA256 6a82e83a536d060a92e0381b25cfe8d6b57ab14e923284890e5d813b83c74c86
MD5 eeb56dd54a427ed2472c6e1983f00da4
SHA1 08f968c9e40f7fcdcf508e9249c87788b400433d
SHA512 3406b114685d741dfa4c68ef43b5a886977c549f2e9f2106acbb10ef1f4a994af73e6ac6c0d79101586744876b9514054bd2411bfb9b0a77df6ef43ea9b87c72
SSDEEP 786432:YIlXNDaTXdjo0fhGdWZP1cxtGzYtksufP8zWsPH49FYXPAjEhy4HPrJd45hL:jN8X9o0fhUxqUkrkPPH8FY/QJgVa5N
TLSH
T1BFA73384EBC345F2ED86053C41B6F33BAA3A75204731DCD7C7905A25ECE12E2693A799
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1091907

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle CompareStringW CopyFileW CreateEventA CreateFileA CreateFileW CreateMutexW CreatePipe CreateProcessW CreateSemaphoreW CreateThread DecodePointer DeleteCriticalSection DeleteFileW DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindFirstFileW FindNextFileW FindResourceW FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDiskFreeSpaceExW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileSize GetFileSizeEx GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetVersionExW GlobalAlloc GlobalFree HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LoadResource LockResource MulDiv MultiByteToWideChar OutputDebugStringW PeekNamedPipe QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile RegisterWaitForSingleObject ReleaseSemaphore RemoveDirectoryW ResetEvent RtlUnwind SetEndOfFile SetEnvironmentVariableW SetEvent SetFileAttributesW SetFilePointer SetFilePointerEx SetLastError SetStdHandle SetThreadPriority SetUnhandledExceptionFilter SizeofResource Sleep SystemTimeToFileTime SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UnregisterWait VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFile

user32

AdjustWindowRectEx BeginPaint CallWindowProcW CharLowerW ClientToScreen CreateAcceleratorTableW CreateIconFromResource CreateIconFromResourceEx CreateWindowExW DefFrameProcW DefWindowProcW DestroyAcceleratorTable DestroyIcon DestroyMenu DestroyWindow DispatchMessageW DrawIconEx DrawStateW DrawTextW EnableWindow EndPaint EnumChildWindows EnumPropsExW EnumWindows ExitWindowsEx FillRect GetActiveWindow GetAsyncKeyState GetClassNameW GetClientRect GetCursorPos GetDC GetDlgCtrlID GetFocus GetForegroundWindow GetIconInfo GetKeyState GetMenu GetMenuItemCount GetMenuItemInfoW GetMessageW GetNextDlgTabItem GetParent GetPropW GetSysColor GetSysColorBrush GetSystemMetrics GetWindow GetWindowDC GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InflateRect InvalidateRect IsChild IsIconic IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadCursorW LoadIconW MapWindowPoints MessageBoxW MoveWindow MsgWaitForMultipleObjects PeekMessageW PostMessageW RedrawWindow RegisterClassExW RegisterClassW RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendMessageW SetActiveWindow SetCapture SetClassLongW SetFocus SetForegroundWindow SetMenu SetPropW SetRect SetScrollPos SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu TranslateAcceleratorW TranslateMessage UnregisterClassW UpdateLayeredWindow UpdateWindow ValidateRect

gdi32

BitBlt CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateFontIndirectW CreateFontW CreatePatternBrush CreateRectRgn CreateRectRgnIndirect CreateSolidBrush DPtoLP DeleteDC DeleteObject EndDoc EndPage ExcludeClipRect ExtSelectClipRgn GdiGetBatchLimit GdiSetBatchLimit GetClipRgn GetDIBits GetDeviceCaps GetMapMode GetObjectType GetObjectW GetPixel GetStockObject GetTextExtentPoint32W GetTextMetricsW OffsetViewportOrgEx SelectClipRgn SelectObject SetBkColor SetBkMode SetBrushOrgEx SetMapMode SetPixel SetStretchBltMode SetTextAlign SetTextColor SetViewportOrgEx StartDocW StartPage StretchBlt TextOutW

comdlg32

PrintDlgW

advapi32

AdjustTokenPrivileges CryptAcquireContextW CryptCreateHash CryptDestroyHash CryptGenRandom CryptGetHashParam CryptHashData CryptReleaseContext GetUserNameW LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW

ole32

CoCreateGuid CoCreateInstance CoInitialize CoTaskMemFree CoUninitialize OleInitialize OleUninitialize RevokeDragDrop StringFromGUID2

shell32

ExtractIconW SHBrowseForFolderW ord165 SHGetFileInfoW SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteExW Shell_NotifyIconW

comctl32

ImageList_Add ImageList_AddMasked ImageList_Create ImageList_Destroy ImageList_Remove ImageList_Replace ImageList_ReplaceIcon InitCommonControlsEx

winspool.drv

ord203

uxtheme

CloseThemeData DrawThemeBackground DrawThemeParentBackground GetThemeBackgroundContentRect IsAppThemed IsThemeBackgroundPartiallyTransparent OpenThemeData

shlwapi

PathFileExistsW

gdiplus

GdipDeleteFont GdipDeleteGraphics GdipDeleteMatrix GdipDeletePath GdipDeletePen GdipDeleteStringFormat GdipFree

winmm

timeBeginPeriod